github.com/notaryproject/notation-go (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/notaryproject/notation-go, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-33959 — CVSS 8.3 (high): notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to…
• CVE-2023-25656 — CVSS 7.5 (high): notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts. Prior to version…
• CVE-2024-56138 — CVSS 4.0 (medium): notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. This issue was…
• CVE-2024-51491 — CVSS 3.3 (low): notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was…